Today on the Social-Engineer Podcast: The Security Awareness Series, Chris is joined by Carter Zupancich. Chris and Carter explore the evolving landscape of social engineering threats, focusing on the rise of vishing attacks and the role of AI in enhancing these tactics. Their discussion underscores the importance of empowering employees as a human firewall and the need for continuous education and testing to strengthen organizational security. [Oct 20, 2025]

00:00 - Intro

00:31 - Carter Zupancich Intro

- Website: https://carterzupancich.com/

01:30 - Intro Links:

- Social-Engineer.com - http://www.social-engineer.com/

- Managed Voice Phishing - https://www.social-engineer.com/services/vishing-service/

- Managed Email Phishing - https://www.social-engineer.com/services/se-phishing-service/

- Adversarial Simulations - https://www.social-engineer.com/services/social-engineering-penetration-test/

- Social-Engineer channel on SLACK - https://social-engineering-hq.slack.com/ssb

- CLUTCH - http://www.pro-rock.com/

- innocentlivesfoundation.org - http://www.innocentlivesfoundation.org/

03:35 - Tools, Tactics and Procedures

05:19 - Tech Advances

08:16 - The Classics

10:01 - The Need for Testing

12:16 - Callback Phishing

17:26 - Setting Expectations

21:56 - Approved Language

23:56 - Verify!

25:16 - Empowerment

26:17 - And Now a Horrible Story

28:47 - Investing In Employees

31:19 - Wrap Up & Outro

- www.social-engineer.com

- www.innocentlivesfoundation.org